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Abstract. Let C : = a„X" + ■ ■ ■ + ag be a hyperelliptic curve with the 
Oi rational integers, n > 5, and the polynomial on the right irreducible. Let 
J be its Jacobian. We give a completely explicit upper bound for the integral 
points on the model C, provided we know at least one rational point on C 
and a Mordell-Weil basis for J{Q). We also explain a powerful refinement of 
the Mordell-Weil sieve which, combined with the upper bound, is capable of 
determining all the integral points. Our method is illustrated by determining 
the integral points on the genus 2 hyperelliptic models — Y = — X and 

(D = (^)- 



1. Introduction 
Consider the hyperelliptic curve with affine model 
(1) C:r2=a„X" + a„_iX"-i + --- + ao, 

with ao, . . . jfln rational integers, a„ 7^ 0, n > 5, and the polynomial on the right 
irreducible. Let H = max{|ao|, . . . , |a„|}. In one of the earliest applications of his 
theory of lower bounds for linear forms in logarithms, Baker [2] showed that any 
integral point (X, Y) on this affine model satisfies 

max(|X|, < expexpexp{(ni""i7)"'}. 

Such bounds have been improved considerably by many authors, including Sprindzuk 
[43] . Brindza [6], Schmidt [39], Poulakis [37], Bilu [3], Bugeaud [M] and Voutier 
[50j . Despite the improvements, the bounds remain astronomical and often involve 
inexplicit constants. 

In this paper we explain a new method for explicitly computing the integral 
points on affine models of hyperelliptic curves ([T}. The method falls into two 
distinct steps: 

(i) We give a completely explicit upper bound for the size of integral solutions 
of ([1]). This upper bound combines the many refinements found in the 
papers of Voutier, Bugeaud, etc., together with Matveev's bounds for hnear 
forms in logarithms [30] . and a method for bounding the regulators based 
on a theorem of Landau [28] . 

(ii) The bounds obtained in (i), whilst substantially better than bounds given 
by earlier authors, are still astronomical. We explain a powerful variant of 
the Mordell-Weil sieve which, combined with the bound obtained in (i), is 
capable of showing that the known solutions to ([T]) are the only ones. 

Step (i) requires two assumptions: 



Date: March 17, 2010. 

2000 Mathematics Subject Classification. Primary 11G30, Secondary 11J8. 

1 



2 



Y. BUGEAUD, M. MIGNOTTE, S. SIKSEK, M. STOLL, SZ. TENGELY 



(a) We assume that we know at least one rational point Pq on C. 

(b) Let J be the Jacobian of C. We assume that a Mordell-Weil basis for 
is known. 

For step (ii) we need assumptions (a), (b) and also: 

(c) We assume that the canonical height h : J(Q) — > R is explicitly computable 
and that we have explicit bounds for the difference 

(2) ^1 < h{D) - h{D) < 

where h is an appropriately normalized logarithmic height on J that allows 
us to enumerate points P in J(Q) with h{P) < i? for a given bound B. 
Assumptions (a)-(c) deserve a comment or two. For many families of curves of 
higher genus, practical descent strategies are available for estimating the rank of the 
Mordell-Weil group; see for example [T7], [33], [3H] and [IS]. To provably determine 
the Mordell-Weil group one however needs bounds for the difference between the 
logarithmic and canonical heights. For Jacobians of curves of genus 2 such bounds 
have been determined by Stoll [44] , [46] , building on previous work of Flynn and 
Smart [24j . At present, no such bounds have been determined for Jacobians of 
curves of genus > 3, although work on this is in progress. The assumption about 
the knowledge of a rational point is a common sense assumption that brings some 
simplifications to our method, although the method can be modified to cope with 
the situation where no rational point is known. However, if a search on a curve of 
genus > 2 reveals no rational points, it is probable that there are none, and the 
methods of [TT], [T^, [T^ are likely to succeed in proving this. 

We illustrate the practicality of our approach by proving the following results. 

Theorem 1. The only integral solutions to the equation 

(3) -Y = - X 
are 

(X,r) = (-1,0), (-1,1), (0,0), (0,1), (1,0), (1,1), (2,-5), 
(2,6), (3,-15), (3,16), (30,-4929), (30,4930). 
Theorem 2. The only integral solutions to the equation 

(4, «^ 



.2/ V5 

are 

(X,y)-(0,0), (0,1), (1,0), (1,1), (2,0), (2,1), (3,0), (3,1), (4,0), (4,1), (5,-1), 
(5,2), (6,-3), (6,4), (7,-6), (7,7), (15,-77), (15,78), (19,-152), (19,153). 

Equations ([3]) and ([4]) are of historical interest and Section [2] gives a brief outline 
of their history. For now we merely mention that these two equations are the 
first two problems on a list of 22 unsolved Diophantine problems [19j . compiled by 
Evertse and Tijdeman following a recent workshop on Diophantine equations at 
Leiden. 

To appreciate why the innocent-looking equations ([3]) and @ have resisted pre- 
vious attempts, let us briefly survey the available methods which apply to hyper- 
elliptic curves and then briefly explain why they fail in these cases. To determine 
the integral points on the affine model C given by an equation ([1]) there are four 
available methods: 
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(I) The first is Chabauty's elegant method which in fact determines all rational 
points on C in many cases, provided the rank of the Mordell-Weil group 
of its Jacobian is strictly less than the genus g\ see for example [12]: |54) . 
Chabauty's method fails if the rank of the Mordell-Weil group exceeds the 
genus. 

(II) A second method is to use coverings, often combined with a version of 
Chabauty called 'Elliptic Curve Chabauty'. See [8], [9], [25], [26]. This 
approach often requires computations of Mordell-Weil groups over number 
fields (and does fail if the rank of the Mordell-Weil groups is too large). 

(III) A third method is to combine Baker's approach through S'-units with the 
LLL algorithm to obtain all the solutions provided that certain relevant 
unit groups and class groups can be computed; for a modern treatment, 
see [4| or [42l Section XIV. 4]. This strategy often fails in practice as the 
number fields involved have very high degree. 

(IV) A fourth approach is to apply Skolem's method to the S'-unit equations 
(see [42, Section III. 2]). This needs the same expensive information as the 
third method. 

The Jacobians of the curves given by (jH]) and @ respectively have ranks 3 and 6 
and so Chabauty's method fails. To employ Elliptic Curve Chabauty would require 
the computation of Mordell-Weil groups of elliptic curves without rational 2-torsion 
over number fields of degree 5 (which does not seem practical at present). To apply 
the S'-unit approach (with either LLL or Skolem) requires the computations of the 
unit groups and class groups of several number fields of degree 40; a computation 
that seems completely impractical at present. 

Our paper is arranged as follows. Section [2] gives a brief history of equations ((Sj) 
and Q. In Section [3| we show, after appropriate scaling, that an integral point 
(x,y) satisfies x — a — where a is some fixed algebraic integer, ^ G Q(a), and 
K is an algebraic integer belonging to a finite computable set. In Section [9] we give 
bounds for the size of solutions a; S Z to an equation of the form x — a = where 
a and k are fixed algebraic integers. Thus, in effect, we obtain bounds for the size of 
solutions integral points on our affine model for ([1]). Sections are preparation for 
Section[9] in particular Section|4|is concerned with heights; Section [5] explains how 
a theorem of Landau can be used to bound the regulators of number fields; Section[6| 
collects and refines various results on appropriate choices of systems of fundamental 
units; Section [7| is devoted to Matveev's bounds for linear forms in logarithms; in 
Section [5] we use Matveev's bounds and the results of previous sections to prove a 
bound on the size of solutions of unit equations; in Section[9]we deduce the bounds 
for X alluded to above from the bounds for solutions of unit equations. Despite our 
best efforts, the bounds obtained for x are still so large that no naive search up 
to those bounds is conceivable. Over the next three sections ITO l [TTl [T2l we explain 
how to sieve effectively up to these bounds using the Mordell-Weil group of the 
Jacobian. In particular. Section [TTj gives a powerful refinement of the Mordell- 
Weil sieve ([11], [13]) which we expect to have applications elsewhere. Finally, in 
Section [T3| we apply the method of this paper to prove Theorems [T] and [2| 

We are grateful to the referee and editors for many useful comments, and to Mr. 
Homero Gallegos-Ruiz for spotting many misprints. 
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2. History of Equations ^ and ^ 
The equation ([3]) is a special case of the family of Diophantine equations 

(5) yP - r = X« - X, 2<p<q. 

This family has previously been studied by Fielder and Alford [20] and by Mignotte 
and Petho The (genus 1) case p ~ 2, q — 3 was solved by Mordell [32] who 
showed that the only solutions in this case are 

iX,Y) = (0,0), (0, 1), (±1,0), (±1, 1), (2,3), (2,-2), (6, 15), (6, -14). 

Fielder and Alford presented the following list of solutions with X, Y > 1: 

(p, g, X, Y) = (2, 3, 2, 3), (2, 3, 6, 15), (2, 5, 2, 6), (2, 5, 3, 16), 

(2, 5, 30, 4930), (2, 7, 5, 280), (2, 13, 2, 91), (3, 7, 3, 13). 

Mignotte and Petho proved that for given p and q with 2 < p < q, the Diophantine 
equation ([5]) has only a finite number of integral solutions. Assuming the abc- 
conjecture, they showed that equation ([5]) has only finitely many solutions with X, 
Y >1. 

li p — 2, q > 2 and y is a prime power, then Mignotte and Petho found all 
solutions of the equation and these are all in Fielder and Alford's list. 

Equation (|4]) is a special case of the Diophantine equation 



(6) 



n\ m 



for i = 1,2, . 



in unknowns k, I, m, n. This is usually considered with the restrictions 2 < k < n/2, 
and 2 < I < to/2. The only known solutions (with these restrictions) are the 
following 

\2 J \8j' \ F2^F2^+Z ) \ F2^F2^+3 + 1 

where Fn is the nth Fibonacci number. It is known that there are no other non- 
trivial solutions with (^) < 10^° or n < 1000; see [53]. The infinite family of 
solutions was found by Lind [55] and Singmaster [¥T| . 
Equation ([6]) has been completely solved for pairs 

(fc,/) = (2,3), (2,4), (2,6), (2,8), (3,4), (3,6), (4,6), (4,8). 

These are the cases when one can easily reduce the equation to the determination 
of solutions of a number of Thue equations or elliptic Diophantine equations. In 
1966, Avanesov [T] found all solutions of equation ^ with (fc, I) = (2, 3). De Weger 
[55] and independently Pinter [M] solved the equation with (fc, I) = (2, 4). The case 
{k,l) = (3,4) reduces to the equation y(y+ 1) = X(X + l)(X + 2) which was solved 
by Mordell [32]. The remaining pairs (2, 6), (2, 8), (3, 6), (4, 6), (4, 8) were treated 
by Stroeker and de Weger [49], using linear forms in elliptic logarithms. 

There are also some general finiteness results related to equation ([6]). In 1988, 
Kiss [27] proved that if fc = 2 and I is a given odd prime, then the equation has 
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only finitely many positive integral solutions. Using Baker's method, Brindza [7] 
showed that equation ([6]) with k = 2 and I > 3 has only finitely many positive 
integral solutions. 

3. Descent 

Consider the integral points on the affine model of the hyperelliptic curve llj. 
If the polynomial on the right-hand side is reducible then the obvious factorisation 
argument reduces the problem of determining the integral points on ([T]) to deter- 
mining those on simpler hyperelliptic curves, or on genus 1 curves. The integral 
points on a genus 1 curve can be determined by highly successful algorithms (e.g. 
|42) . [48]) based on LLL and David's bound for linear forms in elliptic logarithms. 

We therefore suppose henceforth that the polynomial on the right-hand side of 
^ is irreducible; this is certainly the most difficult case. By appropriate scaling, 
one transforms the problem of integral points on ([1]) to integral points on a model 
of the form 

(7) a?/2 = a;" + 6„_i2;"-i + --- + 6o, 

where a and the bi are integers, with a 7^ 0. We shall work henceforth with this 
model of the hyperelliptic curve. Denote the polynomial on the right-hand side by 
/ and let a be a root of /. Then a standard argument shows that 

X -~ a — 

where k, E K = Q{a) and k is an algebraic integer that comes from a finite 
computable set. In this section we suppose that the Mordell-Weil group J(Q) 
of the curve C is known, and we show how to compute such a set of k using our 
knowledge of the Mordell-Weil group J(Q). The method for doing this depends on 
whether the degree n is odd or even. 

3.1. The Odd Degree Case. Each coset of J(Q)/2 J(Q) has a coset representative 
of the form Y^"^i{Pi — 00) where the set {Pi, . . . , Pm} is stable under the action 
of Galois, and where all y{Pi) are non-zero. Now write x{Pi) = ji/df where 7^ is 
an algebraic integer and di € Z>i; moreover if P^, Pj are conjugate then we may 
suppose that di = dj and so 7^, 7j are conjugate. To such a coset representative of 
J(Q) /2 J(Q) we associate 

m 

K = a(™ 2) n - "^') • 
1=1 

Lemma 3.1. Let K. be a set of k associated as above to a complete set of coset 
representatives of J{Q)/2J{Q). Then K is a finite subset of Ok and if {x,y) is an 
integral point on the model ([7]) then x — a = k^^ for some k G K, and ^ G K . 

Proof. This follows trivially from the standard homomorphism 

9 : J(Q)/2J(Q) -> K*/K*^ 

that is given by 

Crn \ m 

^(P, - 00) U a™ H {x{P,) - a) (mod K*^) 
i=l I 1=1 

for coset representatives ~ with y{Pi) 7^ 0; see Section 4 of [45]. □ 
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3.2. The Even Degree Case. As mentioned in the introduction, we shall assume 
the existence of at least one rational point Pq. If Pq is one of the two points at 
infinity, let eq = 1- Otherwise, as / is irreducible, y{Po) ^ 0; write x{Po) = Jo/do 
with 7o € Z and do G Z>i and let eo = 7o — ad^. 

Each coset of J(Q)/2J(Q) has a coset representative of the form J2"Li{Pi ~ Po) 
where the set {Pi, . . . , Pm} is stable under the action of Galois, and where all y{Pi) 
are non-zero for i — 1, . . . , m. Write x{Pi) = ji/df where 7; is an algebraic integer 
and di € 1^>\\ moreover if P^, P, are conjugate then we may suppose that di — dj 
and so 7^, are conjugate. To such a coset representative of J(Q)/2J((Q)) we 
associate 

m 

(m mod 2) TT / ,2\ 

1=1 

Lemma 3.2. Let £ be a set of e associated as above to a complete set of coset 
representatives 0/ J(Q)/2 J(Q). Let A be the discriminant of the polynomial f . For 
each e € £, let be the set of square-free rational integers supported only by primes 
dividing aANorm/f/Q(e). Let JC = {eb : e E £, b E B^}. Then K is a finite subset 
of Ok cind if (x, y) is an integral point on the model ([7|) then x ^ a = for some 
K £ K and ^ g K . 

Proof. In our even degree case, the homomorphism 6 takes values in K* /Q* K*'^ . 
Thus if {x, y) is an integral point on the model (O, we have that {x — a) — e6^^ for 
some e G £ and b a square-free rational integer. A standard argument shows that 
2 I ordp(x — a) for all prime ideals p \ aA. Hence, 2 | ordp(6) for all p | aAe. Let 
p I p where p is a rational prime not dividing aA Normx/Q(e). Then p is unramified 
in K/Q and so ordp(&) = ordp(&) = (mod 2). This shows that b G Be and proves 
the lemma. □ 

3.3. Remarks. The following remarks are applicable both to the odd and the even 
degree cases. 

• We point out that even if we do not know coset representatives for J(Q)/2 J(Q), 
we can still obtain a suitable (though larger) set of k that satisfies the con- 
clusions of Lemmas 13.11 and 13.21 provided we are able to compute the class 
group and unit group of the number field K; for this see for example [8l 
Section 2.2]. 

• We can use local information at small and bad primes to restrict the set /C 
further, compare [TTj and [12j . where this is applied to rational points. In 
our case, we can restrict the local computations to x E Zp instead of Qp. 

4. Heights 
We fix once and for all the following notation. 



K 


a number field. 


Ok 


the ring of integers of K, 


Mk 


the set of all places of K, 


M% 


the set of non- Archimedean places of K, 




the set of Archimedean places of K, 


V 


a place of K, 




the completion of K sd, v, 


dv 


the local degree [Ki, : Q„]. 
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For V G Mk, we let |-|,; be the usual normalized valuation corresponding to v; 
in particular if v is non-Archimedean and p is the rational prime below v then 
\p\v = V^^ ■ Thus if L/K is a field extension, and uj a place of L above v then 
\oi\u — \o!\v, for all a ^ K. 

Define 

MU = \a\t-. 
Hence for a E K*, the product formula states that 

n 

vEMk 

In particular, if v is Archimedean, corresponding to a real or complex embedding 
a of K then 



and 



|cr(a)| if cr is real 
|f7(Q;)P if fj is complex. 



For a E K, the (absolute) logarithmic height h{a) is given by 
(8) h(a) = r^^^Qi XI ^^log™ax{l,|a|„} = — ^ logmax{l, |la|l.J . 

The absolute logarithmic height of a is independent of the field K containing a. 
We shall need the following elementary properties of heights. 

Lemma 4.1. For any non-zero algebraic number a, we have h.(a^^) = h(a). For 
algebraic numbers ai, . . . , a„, we have 

h(Q!iQ!2 • • • a„) < h(Q;i)+- • •+h(Q„), h(ai+- • •+q„) < logn+h(ai)+- • •+h(Q:„). 

Proof. The lemma is Exercise 8.8 in [40]. We do not know of a reference for 
the proof and so we will indicate briefly the proof of the second (more difficult) 
inequality. For v G Mk, choose in {1, . . . , n} to satisfy max{|ai|t,, . . . , |a„|t,} = 
\ai^ \v. Note that 



n if u is Archimedean, 
1 otherwise. 



|q!i H \- an\v < ev\aijv, where 

Thus 

n 

logmax{l, ha„|i,} < log -flog max{l, \a^Jv} < loge^-t-^ logmax{l, \a^\^,}. 

i=l 

Observe that 

the desired inequality follows from the definition of logarithmic height ([8|) . □ 
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4.1. Height Lower Bound. We need the foUowing resuh of Voutier [51] concern- 
ing Lehmer's problem. 

Lemma 4.2. Let K be a number field of degree d. Let 

tfd^l, 2, 



Ok = 




ifd>3. 



logd 

Then, for every non-zero algebraic number a in K , which is not a root of unity, 

deg(a) h(a) > Ok- 

Throughout, by the logarithm of a complex number, we mean the principal 
determination of the logarithm. In other words, if a; G C* we express x = re*^ 
where r > and — tt < 6* < tt; we then let logx = logr + i9. 

Lemma 4.3. Let K be a number field and let 

For any non-zero a £ K and any place v € Mk 

\og\al, < deg(a) h(a), log||a|U < [K : Q] h(a). 

Moreover, if a is not a root of unity and a is a real or complex embedding of K 
then 

|logcr(a)| < d'j^deg{a)h{a). 

Proof. The first two inequalities are an immediate consequence of the definition of 
absolute logarithmic height. For the last, write cr(a) ~ 6"^+'^, with a = log|cr(Q;)| 
and |6| < tt, and let d — deg(a). Then we have 

|log(T(a)| = (a^ + 62)1/2 < (iog2|^(a)| + jr^/^ < {idh{a)f + n^f^^. 

By Lemma l472l we have dh{a) > Ok, so 

^2 \ 1/2 



|log(T(a)| <dh(a) [l+gT 
as required. □ 

5. Bounds for Regulators 

Later on we need to give upper bounds for the regulators of complicated number 
fields of high degree. The following lemma, based on bounds of Landau 28 , is an 
easy way to obtain reasonable bounds. 

Lemma 5.1. Let K be a number field with degree d ^ u + 2v where u and v 
are respectively the numbers of real and complex embeddings. Denote the absolute 
discriminant by Dk and the regulator by Rk , o-nd the number of roots of unity in 
K by w. Suppose, moreover, that L is a real number such that Dk < L. Let 

a = 2-^ Tr-""/^ Vl. 

Define the function fniL, s) by 

fK{L, s) = 2-" w (r(s/2))" (r(s))%'^+i {s - l)i-^ 
and let Bk{L) ^mm{fK(L, 2- t/lOQQ) : < = 0, 1, . . . , 999}. Then Rk < Bk{L). 
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Proof. Landau 28, proof of Hilfssatz 1] established the mequahty Rk < fxiDK, s) 
for all s > 1. It is thus clear that Rk < Bk{L). □ 

Perhaps a comment is in order. For a complicated number field of high degree 
it is difficult to calculate the discriminant Dk exactly, though it is easy to give an 
upper bound L for its size. It is also difficult to minimise the function fK{L,s) 
analytically, but we have found that the above gives an accurate enough result, 
which is easy to calculate on a computer. 

6. Fundamental Units 

For the number fields we are concerned with, we shall need to work with a certain 
system of fundamental units, given by the following lemma due to Bugeaud and 
Gyory, which is Lemma 1 of [15 . 

Lemma 6.1. Let K be a number field of degree d and let r = rx be its unit rank 
and Rk its regulator. Define the constants 

/ |\2 / ^ \ r — 1 ^ 

Ci =Ci(X) = C2 =C2(if) =Ci — j , C3=C3{K)=Ci—. 

Then K admits a system {ei, . . . ,6^} of fundamental units such that: 



(i) n^(^^) ^ ^1-^^' 



i=l 

(ii) h(e,) < C2Rk, l<i<r, 

(iii) Write Ai for the rxr-matrix (log||ei||^,) where v runs overr of the Archimedean 
places of K and 1 < i < r. Then the absolute values of the entries of A4~^ 
are bounded above by C3. 

Lemma 6.2. Let K be a number field of degree d, and let {ei, . . . ,er} be a system 
of fundamental units as in Lemma \6.1\ Define the constant a = Ci{K) = rdc^. 
Suppose e — C,ei . . . e^'', where C is a root of unity in K. Then 

max{|6i|, . . . , \br\} < C4h(e). 
Proof. Note that for any Archimedean place v of K, 

The lemma now follows from part (iii) of Lemma 16. 11 plus the fact that log||£||t, < 
dh{e) for all v given by Lemma l473l □ 

The following result is a special case of Lemma 2 of [15 . 

Lemma 6.3. Let K be a number field of unit rank r and regulator K . Let a be 
a non-zero algebraic integer belonging to K. Then there exists a unit e of K such 
that 

, . s . n , log|Normjf/Q(a)| 
Has) < c,Rk + 

where 



C5 = C5(/\) = 
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Lemma 6.4. Let K be a number field, /?, £ G K* with e being a unit. Let a be the 
real or complex embedding that makes \a{l3e)\ minimal. Then 

h(/3e) <h(/3)-log|a(/3£)|. 

Proof. As usual, write d — [K : Q] and d^ — [K^j : Qi,]. Note 

h(/3£) = h(l//3£) 

= i ^ d,max{0,log(|/3£|-i)} + i ^ max{0, log(|/3e|-i)} 
<log(|a(/3e)ri) + i J2 d.max{0,log(|/3|;;i)} 
<-log|a(/3£)| + i ^ d,max{0,log(|/3|-i)} 

vGMk 

<-log|a(/3£)|+h(/3), 
as required. □ 

7. Matveev's Lower Bound for Linear Forms in Logarithms 

Let L be a number field and let tr be a real or complex embedding. For a € L* 
we define the modified logarithmic height of a with respect to a to be 

hL,,(a) :=max{[L : Q] h(a) , |loga(a)| , 0.16}. 

The modified height is clearly dependent on the number field; we shall need the 
following Lemma which gives a relation between the modified and absolute height. 

Lemma 7.1. Let K C_ L be number fields and write 

Ol/k = max|[L : Q] , [K : Q]9^ , ^'^^^^ 



dK 

Then for any a (E K which is neither zero nor a root of unity, and any real or 
complex embedding a of L, 

hL,<7(a) < dL/K^{a). 

Proof. By Lemma 14.31 we have 

[K : Q]c'^h(a) > 9^ deg(a) h(a) > \\ogn{a)\. 
Moreover, by Lemma [321 

0.16[g:Q]h(Q) ^ 0.16deg(a)h(a) ^ ^ 
Qk ~ Ok 

The lemma follows. □ 



We shall apply lower bounds on linear forms, more precisely a version of Matveev's 
estimates [3D]. We recall that log denotes the principal determination of the loga- 
rithm. 
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Lemma 7.2. Let L he a number field of degree d, with ai, . . . , an G L* . Define a 
constant 

C{L, n) 3 • 30"+^^ • (n + l)^-^ (1 + logd). 
Consider the "linear form" 

A:=a^...a^-1, 

where 6i, . . . , 6„ are rational integers and let B :— max{|6i|, . . . , If A ^ 0, 

and a is any real or complex embedding of L then 

n 

log|a(A)| > -C{L,n){l + log(nB)) J] hL,M,)- 
Proof. This straightforward corollary of Matveev's estimates is Theorem 9.4 of 

m. □ 



8. Bounds for Unit Equations 

Now we are ready to prove an explicit version of Lemma 4 of |14| . The proposition 
below allows us to replace in the final estimate the regulator of the larger field by the 
product of the regulators of two of its subfields. This often results in a significant 
improvement of the upper bound for the height. This idea is due to Voutier |50| . 

Proposition 8.1. Let L be a number field of degree d, which contains K\ and K2 
as subfields. Let Rk^ (respectively ri) be the regulator (respectively the unit rank) 
of Ki . Suppose further that v\ , U2 arid V3 are non-zero elements of L with height 
< H (with H > 1) and consider the unit equation 

(9) i^iEi + V2£2 + i^ssa — 

where £1 is a unit of Ki, £2 a unit of K2 and £3 a unit of L. Then, for i = 1 and 2, 
h{iyi£i/ 1^363) < A2+ Ai log{H + max{h(i^i£i),h(z^2£2)}}, 

where 

A,=2H- C{L,r^ + + 1) • c,{K,)c,{K2)dL/L ■ {dL/Kj' ' {d^K^r ' Rk.Rk,. 
and 

A2 = 2H + Ai + Ai log{(ri + 7-2 + 1) • max{c4(iiri), C4(i^2), 1}}. 

Proof. Let {fii, . . . , /^n} and {pi, . . . , pra} be respectively systems of fundamental 
units for Ki and K2 as in Lemma 16.11 in particular we know that 

(10) l[h{fi,) <ci{Ki)Rk,, 1[Hpj) < ci{K2)Rk,. 
We can write 

£1 = Ci/^i' • • • Mr? , £2 = C2p{' • • • pl? , 
where Ci and C2 are roots of unity and 61 , . . . , 6^1 , and /i , . . . , are rational 
integers. Set 

Bi = max{|6i|, . . . , \br,\}, B2 = max{|/i|, . . . , j/^J}, B = max{Bi,B2, 1}. 
Set ao = -C2i^2/(CiJ^i) and &o = 1- By 

'^SES bo -61 -b^i fl fr2 1 
= "oVl • • • Pi ■■■ Pr2 - 1- 
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Now choose the real or complex embedding a oi L such that |cr((i/3£3)/(z^iei))| is 
minimal. We apply Matveev's estimate (Lemma l7.2|) to this "linear form", obtain- 
ing 



log 



> -C{L, n){l + log(nB)) hL,a(ao) H ^L^ai^ij) Y[ ^L,aiPj), 

i=i i=i 



where n = ri + r2 + 1. Using Lemma |7. II and equation (1101) we obtain 

i=i j=i 
and a similar estimate for Y['j=i^L.iTiPj)- Moreover, again by Lemma 17.11 and 
LemmaOl h.L,aiao) < 2HdL/L- Thus 

Now applying Lemma |6.4[ we obtain that 



log 



> -Ai{l + \og{nB)). 



hf^ 

\viei 



< h 



□ 



Ai{l + log(7iB)) <2H + Ai{l + \og{nB)). 

The proof is complete on observing, from Lemma 16.21 that 

B < max{c4(A'i),C4(i^2),l)}max{h(£i),h(e2),l}, 
and from Lemma [4.11 h{i'i£i) < h{ei) + h{i'i) < h(e) + H. 

9. Upper Bounds for the Size of 
Integral Points on Hyperelliptic Curves 

We shall need the following standard sort of lemma. 

Lemma 9.1. Let a, h, c, y he positive numbers and suppose that 

y < a + b\og{c + y). 

Then 

y < 2b\ogb + 2a + c. 

Proof. Let z ~ c + y, so that z < {a + c) + 61ogz. Now we apply case h — 1 oi 
Lemma 2.2 of [33]; this gives z < 2(6 log 6 + a + c), and the lemma follows. □ 

Theorem 3. Let a be an algebraic integer of degree at least 3, and let k be a integer 
belonging to K. Let ai, a2, aa be distinct conjugates of a and ki, K2, be the 
corresponding conjugates of k. Let 

Ki = Q{ai,a2,y/KiK2), K2^Q{ai,a3,y/K^), K3 ^ Q{a2,a3, ^/k^), 

and 

L = Q(ai, a2, as, Vk^, ^/kiks)- 
Let R be an upper bound for the regulators of Ki, K2 and K3. Let r be the maximum 
of the unit ranks of Ki, K2, K3. Let 



max Cj{Ki). 



l<i<3 



Let 



N= max |NormQ(„ )/Q(Ki(ai-Q;j))| 

Ki, 7<3 
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Let ^ 

Al = 2H* ■ C{L, 2r + 1) • {cD^Ol/l ■ max • 
and 

a; = 2H* + AI+AI log{(2r + 1) • niax{c:, 1}}. 
If X E Z\{0} satisfies x — a — for some £ K then 

log\x\ < 8AI log(4At) + +201og2 + 13h(K) + 19h(a). 

Proof. Conjugating the relation x — a = appropriately and taking differences 
we obtain 

ai - a2 = - «iCi7 "3 - ai = KiCi - K3C3: "2 - "3 = 'tsCs - ^2^2 ■ 

Let 

Tl = Kl^l, T2 = A/K1K2C2, T3 = \/kiK3C3- 

Observe that 

/ \ 22/ \ 22/ \ 22 

Ki (ai - a2) = T2 - , Ki (as - q;i ) = - Tg , ki (02 - as) = T3 - T2 , 

and 

T2±TieKi, Ti±T3eK2, T3±T2 £ ^ K^l K.2K-i. 

We claim that each ± Tj can be written in the form ve where e is a miit in one of 
the Ki and G L is an integer satisfying \\{y) < H*. Let us show this for T2 — T3; 
the other cases are either similar or easier. Note that T2 — T3 = ki/ K2v" where 
v" is an integer belonging to K-^. Moreover, v" divides 



— (t3 - T2) ■ \ —{t3 + T2) ^ K2{a2 - "3)- 

Kl y Kl 

Hence |Normx3/Q(j^")l 1^ By Lemma [6. 3[ we can write ~ v'e where e £ K3 
and 

M^')<C.(/.3)i^+j^. 

Now let ly = \/ ki/ K2v' ■ Thus T2 — T3 = ve where \i{v) < h(i^') +h(K) < H* proving 
our claim. 

We apply Proposition 18 . 1 1 to the unit equation 

(n - T2) + (t3 - Tl) + (t2 - T3) = 0, 

which is indeed of the form viEi + i^2£2 + ^^323 = where the Vi and satisfy the 
conditions of that proposition with H replaced by H* . We obtain 

' Tl - T2 ' 

-T3, 

Observe that 

h{n ± Tj ) < log 2 + h(r,) + h(r,-) 

< log2 + 2h(K) + 2h(^) 

< log 2 + 3 h(K) + h(a; - a) 

< 2 log 2 + 3 h(K) + h(a) + log|a;| 



<A*2 + Al log{H* + max{h(r2 - T3), h{n - T2)}}. 
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where we have made repeated use of Lemma 14.11 Thus 

h <A;+AI log{A*, + \og\x\), 

where A* = iJ* + 2 log 2 + 3 h{K) + h{a). 

We also apply Proposition 18. II to the unit equation 

(n + T2) + (rs - Ti) - (t2 + T3) = 0, 

to obtain precisely the same bound for h ^^J^^^ Using the identity 

/ Ti - r2 \ / Ti + r2 \ _ Ki{a2 - ai) 
VT1-T3/ \T1-T3J (ri - ra)^ 

we obtain that 

h(ri - ra) < ^"^^^^^""^ + h(a) + A; + A*, log(A* + log|:r|). 

Now 

log|a;| < log 2 + h(a) + h(a:: - ai) 

< log2 + h{a) + h{K) + 2h(Ti) (using x - ai ^ ^1 / ki) 

< 51og2 + h(a) +h(K) + 2h(ri +T;3) + 2h(ri - T3) 

< 5 log 2 + h{a) + h{K) + 2 h (^ ^i(Q'3-«i) \ ^ ^ ^^^^ _ 

V n - T-3 y 

< 71og2 + 5h(a)+3h(K)+4h(Ti-T3) 

< 91og2 + 9h(a) + 5h(K) +4A^ +4^5: log(A^ + log|a;|). 

The theorem follows from Lemma [9. II □ 

10. The Mordell-Weil Sieve I 

The Mordell-Weil sieve is a technique that can be used to show the non-existence 
of rational points on a curve (for example |11| . |13|). or to help determine the set 
of rational points in conjunction with the method of Chabauty (for example [lOj): 
for connections to the Brauer-Manin obstruction see, for example, [23], [35] or [47] . 
In this section and the next we explain how the Mordell-Weil sieve can be used to 
show that any rational point on a curve of genus > 2 is either a known rational 
point or a very large rational point. 

In this section we let C/Q be a smooth projective curve (not necessarily hyperel- 
liptic) of genus g > 2 and we let J be its Jacobian. As indicated in the introduction, 
we assume the knowledge of some rational point on C; henceforth let D he a fixed 
rational point on C (or even a fixed rational divisor of degree 1) and let j be the 
corresponding Abel-Jacobi map: 

]:C~^J, P^[P-D]. 

Let W be the image in J of the known rational points on C. The Mordell-Weil 
sieve is a strategy for obtaining a very large and 'smooth' positive integer B such 
that 

j(C(Q)) CW + BJiQ). 
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Recall that a positive integer B is called ^-smooth if all its prime factors are < A. 
By saying that B is smooth, we loosely mean that it is A-smooth with A much 
smaller than B. 

Let S* be a finite set of primes, which for now we assume to be primes of good 
reduction for the curve C. The basic idea is to consider the following commutative 
diagram. 

cm J{Q)/BJ{Q) 



n C{¥p) H J{¥p)/BJ{¥p) 

pes pes 

The image of C(Q) in J{<Q)/ BJ{<Q) must then be contained in the subset of 
J{Q)/BJ{Q) of elements that map under a into the image of the lower horizontal 
map. If we find that this subset equals the image of W in J{Q)/BJ{Q), then we 
have shown that 

j{C{Q)) CW + BJ{Q) 

as desired. Note that, at least in principle, the required computation is finite: each 
set C(Fp) is finite and can be enumerated, hence j{C{¥p)) can be determined, and 
we assume that we know explicit generators of J(Q), which allows us to construct 
the finite set J{Q)/BJ{Q). In practice, and in particular for the application we 
have in mind here, we will need a very large value of B, so this naive approach is 
much too inefficient. In and [13j . the authors describe how one can perform 
this computation in a more efficient way. 

One obvious improvement is to replace the lower horizontal map in the diagram 
above by a product of maps 

C(Qp) 4 Gp/BGp 

with suitable finite quotients Gp of J(Qp). We have used this to incorporate in- 
formation modulo higher powers of p for small primes p. This kind of information 
is often called "deep" information, as opposed to the "fiat" information obtained 
from reduction modulo good primes. 

We can always force B to be divisible by any given (not too big) number. In our 
application we will want B to kill the rational torsion subgroup of J. 

11. The Mordell-Weil Sieve II 

We continue with the notation of Section [101 Let W be the image in J(Q) of 
all the known rational points on C. We assume that the strategy of Section [10] 
is successful in yielding a large 'smooth' integer B such that any point P G C{<Q) 
satisfies j{P) — w E BJ{<Q) for some w £ W, and moreover, that B kills all the 
torsion of J(Q). 

Let 

^tZ-^^JCQ), 0(ai,...,a,) =^a,A, 
so that the image of (/> is simply the free part of J(Q). Our assumption is now that 
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Set Lq = SZ". We explain a method of obtaining a (very long) decreasing 
sequence of lattices in Z" : 

(11) BZ" = Lo 2 ii 2 ^2 2 ■ ■ • 2 i/c 

such that 

jiCm) C + 0(i,) 

for j — I, . . . ,k. 

If g is a prime of good reduction for J we denote by 

: Z'^ ^ J{¥q), cj)q{ai, ...,ar)^ y^Q»A, 

and so cj)q{l) — 0(1). 

Lemma 11.1. Let W be a finite subset of J{Q), and let L be a subgroup of 1/" . 
Suppose that j(C(Q)) G W + (1}{L). Let q be a prime of good reduction for C and 
J . Let L' be the kernel of the restriction 4>q\L- Let li, . . . , !,„ be representatives of 
the non-zero cosets of LjL' and suppose that w + (t>q{li) ^ jC'{¥q) for all w W 
andi = l,...,m. Then j{C{Q)) C W + (j>iL'). 

Proof Suppose P € C(Q). Since j(C(Q)) C W + (l){L), we may write j{P) = 
w + for some 1 € L. Now let Iq = 0, so that Iq, • • • , Im represent all cosets of 
L/L' . Then 1 = 1.^ + 1' for some 1' € L' and i — . . . ,m. However, (i>q(\') — 0, or in 
other words, 0(1') — 0. Hence 

XP) = AP) ^ W + Cj)q{\) ^ w + 0,(10 + 0,(1') + 0,(1,). 

By hypothesis, w + 0,(1^) ^ jC(F,) for z = 1, . . . , m, so i = and so Ij = 0. Hence 
]{P) = w + \' €W L' as required. □ 

We obtain a very long strictly decreasing sequence of lattices as in ([TT|) by re- 
peated application of Lemma 111.11 However, the conditions of Lemma 111.11 are 
unlikely to be satisfied for a prime q chosen at random. Here we give criteria that 
we have employed in practice to choose the primes q. 
(I) gcd(i?,#J(F,)) > (#J(F,))0-6, 
(II) V ^ L, 

(HI) #W ■ {#L/L' - 1) < 2q, 

(IV) w + 0,(li) i jC{¥g) for all w e I^ and i = 1, . . . , m. 
The criteria I-IV are listed in the order in which we check them in practice. Cri- 
terion IV is just the criterion of the lemma. Criterion II ensures that L' is strictly 
smaller than L, otherwise we gain no new information. Although we would like L' 
to be strictly smaller than L, we do not want the index L/L' to be too large and 
this is reflected in Criteria I and HI. Note that the number of checks required by 
Criterion IV (or the lemma) is #VF • (#L/L' — 1). If this number is large then 
Criterion IV is likely to fail. Let us look at this in probabilistic terms. Assume that 
the genus of C is 2. Then the probability that a random element of J(F,) lies in 
the image of C(F,) is about 1/q. If TV = #W ■ (#L/i' - 1) then the probability 
that Criterion IV is satisfied is about (1 — g"^)^. Since (1 — g"^)"^ ~ e~^, we do 
not want N to be too large in comparison to q, and this explains the choice of 2q 
in Criterion III. 

We still have not justified Criterion I. The computation involved in obtaining L' 
is a little expensive. Since we need to do this with many primes, we would like a 
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way of picking only primes where this computation is not wasted, and in particular 
^L/ L' is not too large. Now at every stage of our computations, L will be some 
element of our decreasing sequence pT|) and so contained in i3Z". Criterion I 
ensures that a 'large chunk' of L will be in the kernel of (pq : Z" J{^q) and so 
that ^L/L' is not too large. The exponent 0.6 in Criterion I is chosen on the basis 
of computational experience. 

12. Lower Bounds for the Size of Rational Points 

In this section, we suppose that the strategy of Sections [10] and [TT] succeeded in 
showing that j{C{Q)) C W + (j){L) for some lattice L of huge index in Z*", where 
W is the image of J of the set of known rational points in C. In this section we 
provide a lower bound for the size of rational points not belonging to the set of 
known rational points. 

Lemma 12.1. Let W be a finite subset of J{Q), and let L be a sublattice oj U . 
Suppose that j(C((Q)) d W + 4>{L). Let /ii be a lower bound for h — h as in 
Let 

fi2 — max I \J h{w) : w & . 

Let M be the height-pairing matrix for the Mordell-Weil basis Di, . . . , Dr and let 
Ai, . . . , Ar be its eigenvalues. Let 

^l3 ^ min I ^AJ : j = 1, . . . , rj . 

Let m{L) be the Euclidean norm of the shortest non-zero vector of L, and suppose 
that fj,2m{L) > fi2- Then, for any P G C(Q), either ]{P) or 

h{]{P)) > {fi3m{L) - ^i2f + fii. 

Note that ni{L) is called the minimum of L and can be computed using an 
algorithm of Fincke and Pohst [21] • 

Proof. Suppose that j{P) ^ W . Then j(P) = w -\- 0(1) for some non-zero element 
1 £ L. In particular, if ||-|| denotes Euclidean norm then > m{L). 

We can write M — NAN* where N is orthogonal and A is the diagonal matrix 
with diagonal entries A^. Let x — IN and write x = (xi, . . . , Xr). Then 

= IMl* = xAx* > Msllxll^ = ^4\\l\\^ > t^lm{Lf. 

Now recall that D i-> \J h{D) defines a norm on J(Q) ® M and so by the triangle 
inequality 

^Hm) > \/Hm - \fk^) > l^3rn{L) - f,2. 
The lemma now follows from ((^J). □ 

Remark. We can replace n^m^L) with the minimum of L with respect to the 
height pairing matrix. This is should lead to a very slight improvement. Since 
in practice our lattice L has very large index, computing the minimum of L with 
respect to the height pairing matrix may require the computation of the height 
pairing matrix to very great accuracy, and such a computation is inconvenient. We 
therefore prefer to work with the Euclidean norm on IT . 
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Table 1. 



coset of 




unit rank 


bound R for 


bound for 


J((Q)/2J(Q) 




of i-T, 


regulator of Ki 


log a; 





1 


12 


1.8 X 10^^ 


1.0 X 10^**^ 


Di 


-2a 


21 


6.2 X 10^3 


7.6 X 10^92 




4- 2a 


25 


1.3 X 10^4 


2.3 X 10^60 


D3 


-4 -2a 


21 


3.7 X 10^5 


1.6 X 10^^^ 


D1 + D2 


-2a + a^ 


21 


1.0 X 10^2 


3.2 X 10^87 


D1 + D3 


2a + a^ 


25 


7.9 X lO^'^ 


5.1 X 10*565 


D2 + D3 


-4 + a2 


21 


3.7 X 10^5 


1.6 X 10^^^ 


D1+D2 + D3 


8a - 2a^ 


25 


7.9 X 10^^ 


5.1 X 10^65 



13. Proofs of Theorems [D and [2] 
The equation —Y — — X is transformed into 
(12) C : 2y^ = x^-mx + 8, 

via the change of variables y — 4Y — 2 and x — 2X which preserves integrality. 
We shall work the model p2)) . Let C be the smooth projective genus 2 curve with 
affine model given by (fT^ . and let J be its Jacobian. Using MAGMA [5] we know 
that J{Q) is free of rank 3 with Mordell-Weil basis given by 

Di^{0,2)~(x, = (2, 2) - 00, Z?3 = (-2, 2) - 00. 

The MAGMA programs used for this step are based on StoU's papers [44], [45], j46j . 

Let f = x^ — IQx + 8. Let a be a root of /. We shall choose for coset rep- 
resentatives of J(Q)/2J(Q) the linear combinations X]^=i "i^* with rii E {0,1}. 
Then 

X — a — K^2^ 

where k € JC and /C is constructed as in Lemma [3T] We tabulate the k correspond- 
ing to the X]i=i iT-i^i in Table [TJ 

Next we compute the bounds for log x given by Theorem [3] for each value of 
K. We implemented our bounds in MAGMA. Here the Galois group of / is 6*5 which 
implies that the fields Ki, K2, K3 corresponding to a particular k are isomorphic. 
The unit ranks of Ki, the bounds for their regulator as given by Lemma |5.1[ and 
the corresponding bounds for log x are tabulated in Table [1] 

A quick search reveals 17 rational points on C: 

ex., (-2, ±2), (0,±2), (2, ±2), (4, ±22), (6, ±62), 
(1/2, ±1/8), (-15/8, ±697/256), (60, ±9859). 

Let W denote the image of this set in J(Q). Applying the implementation of the 
Mordell-Weil sieve due to Bruin and StoU which is explained in Section [10] we 
obtain that j(C(Q)) CW + BJ{Q) where 

B = 4449329780614748206472972686179940652515754483274306796568214048000 
= 2^ • 3* • 5^ • 7^ • 11^ • 132 • 172 • 19 • 23 • 29 • 31^ • J| p. 

37<p<149 
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For this computation, we used "deep" information modulo 2^, 3^, S'', 7^, 11^, 13^, 
17^, 19^, and "flat" information from all primes p < 50000 such that #J(Fp) is 
500-smooth (but keeping only information coming from the maximal 150-smooth 
quotient group of J(Fp)). Recall that an integer is called A-smooth if all its prime 
divisors are < A. This computation took about 7 hours on a 2 GHz Intel Core 2 
CPU. 

We now apply the new extension of the Mordell-Weil sieve explained in Sec- 
tion [TTJ We start with Lq = BZ^ where B is as above. We successively apply 
Lemma 1 11 . II using all primes q < 10^ which are primes of good reduction and sat- 
isfy criteria I-IV of Section [TTJ There are 78498 primes less than 10^. Of these, we 
discard 2, 139, 449 as they are primes of bad reduction for C. This leaves us with 
78495 primes. Of these. Criterion I fails for 77073 of them. Criterion II fails for 
220 of the remaining. Criterion III fails for 43 primes that survive Criteria I and II, 
and Criterion IV fails for 237 primes that survive Criteria I-III. Altogether, only 
922 primes q < 10^ satisfy Criteria I-IV and increase the index of L. 

The index of the final L in is approximately 3.32 x lO'^^^". This part of the 
computation lasted about 37 hours on a 2.8 GHZ Dual-Core AMD Opteron. 

Let /ii, fi2, Ma be as in the notation of Lemma Il2.ll Using MAGMA we find 
fii — 2.677, /i2 — 2.612 and fi^ = 0.378 (to 3 decimal places). The shortest vector 
of the final lattice L is of Euclidean length approximately 1.156 x 10^"*" (it should 
be no surprise that this is roughly the cube root of the index of L in Z"^). By 
Lemma ri2. II if P e C{Q) is not one of the 17 known rational points then 

h{j{P)) > 1.9 X 10^159. 

If P is an integral point, then h{j{P)) = log 2 -f 2 loga;(P). Thus 

loga;(P) > 0.95 x 10^^^^^ 

This contradicts the bounds for log a: in Table [T] and shows that the integral point P 
must be one of the 17 known rational points. This completes the proof of Theorem[T] 
The proof of Theorem [2] is similar and we omit the details. 

The reader can find the MAGMA programs for verifying the above computations 
at: http : //www . Warwick . ac . uk/ staf f /S . Siksek/progs/ intpoint/^ 
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